GNU Project GNU Grub
4 CVEs affecting GNU Project GNU Grub. Latest disclosed: 2023-07-20. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-28734 | High | 8.1 | 2023-07-20 | Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by on… |
CVE-2022-28733 | High | 8.1 | 2023-07-20 | Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->… |
CVE-2022-28735 | Medium | 6.7 | 2023-07-20 | The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverifie… |
CVE-2022-28736 | Medium | 6.4 | 2023-07-20 | There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up operating systems that doesn't support mu… |